Regulation is no longer arriving as broad, sector-wide overhauls, according to CUBE’s latest fortnightly analysis.
Instead, it is landing in narrow, precisely targeted increments, a threshold here, a vendor requirement there, a licensing deadline elsewhere, and that shift is changing what effective compliance monitoring actually looks like.
CUBE’s review of the period between 22 August and 4 September 2026 points to a fortnight in which several unrelated deadlines converged.
The European Banking Authority opened consultations on both the €30bn asset threshold that determines when an investment firm must be reclassified as a credit institution, and on new operational risk management standards. Separately, the US Treasury launched a Quantum-Readiness Task Force requiring institutions to map cryptographic dependencies vendor by vendor, while ASIC cut its licensing turnaround target to 120 days ahead of a 30 September 2026 deadline for digital asset platforms. None of these share a rulebook, region or timeline, which CUBE argues is precisely the point. The firm’s own Cost of Compliance Report 2025 found that 82% of firms track between 26 and 100 regulatory developments a month, with 52% taking two to three weeks to complete an initial impact assessment on each one.
CUBE also flags that complexity is increasingly assessed at entity level rather than across a sector. The EBA’s €30bn threshold is judged at both solo and group level, and any waiver depends on factors specific to the applying firm, not the industry it operates in. For compliance and risk teams, CUBE notes, this means coverage measured purely by jurisdiction count can obscure where the real workload sits: between individual entities within the same group, each carrying its own thresholds and waiver conditions.
A third theme identified by CUBE concerns financial infrastructure. The Treasury’s task force is coordinating a shift to post-quantum cryptography across sector alignment, vendor readiness and digital-asset risk, while the European Central Bank prepares to launch Pontes, its bridge for settling DLT-based transactions in central bank money, in the third quarter of 2026. Hong Kong’s exchange continues expanding cross-border settlement links with mainland China. CUBE points out this is not conduct regulation in the traditional sense, but infrastructure change driven by technology timelines rather than legislative ones. The Bank for International Settlements underscored this urgency as early as July 2025, warning that firms “must urgently initiate preparations today” for the migration of cryptographic infrastructure.
CUBE’s conclusion is that narrower rules cut both ways. A threshold, vendor requirement or licensing deadline can be answered directly where it lands rather than pieced together retrospectively, provided firms have visibility at that granular level.
For more, read the full story here.
Read the daily FinTech news
Copyright © 2026 FinTech Global
Copyright © 2026 RegTech Analyst
